CVE-2023-51390

journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/Aiven-Open/journalpump/commit/390e69bc909ba16ad5f7b577010b4afc303361da	Patch
https://github.com/Aiven-Open/journalpump/security/advisories/GHSA-738v-v386-8r6g	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:aiven:journalpump:*:*:*:*:*:*:*:*

History

02 Jan 2024, 16:25

Type	Values Removed	Values Added
CWE	CWE-284 CWE-215	CWE-319
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
References	~~() https://github.com/Aiven-Open/journalpump/security/advisories/GHSA-738v-v386-8r6g -~~	() https://github.com/Aiven-Open/journalpump/security/advisories/GHSA-738v-v386-8r6g - Vendor Advisory
References	~~() https://github.com/Aiven-Open/journalpump/commit/390e69bc909ba16ad5f7b577010b4afc303361da -~~	() https://github.com/Aiven-Open/journalpump/commit/390e69bc909ba16ad5f7b577010b4afc303361da - Patch
CPE		cpe:2.3:a:aiven:journalpump::::::::
First Time		Aiven Aiven journalpump

21 Dec 2023, 02:24

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-21 00:15

Updated : 2024-02-28 20:54

NVD link : CVE-2023-51390

Mitre link : CVE-2023-51390

CVE.ORG link : CVE-2023-51390

JSON object : View

Products Affected

aiven

journalpump

CWE

CWE-319

Cleartext Transmission of Sensitive Information

CWE-215

Insertion of Sensitive Information Into Debugging Code

CWE-284

Improper Access Control

{"id": "CVE-2023-51390", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2023-12-21T00:15:26.163", "references": [{"url": "https://github.com/Aiven-Open/journalpump/commit/390e69bc909ba16ad5f7b577010b4afc303361da", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Aiven-Open/journalpump/security/advisories/GHSA-738v-v386-8r6g", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}, {"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-215"}, {"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0."}, {"lang": "es", "value": "journalpump es un daemon que toma mensajes de registro de journald y los env\u00eda a una salida determinada. Se encontr\u00f3 una vulnerabilidad de registro en journalpump que registra la configuraci\u00f3n de una integraci\u00f3n de servicios en texto plano en la canalizaci\u00f3n de registro proporcionada, incluida la informaci\u00f3n de credenciales contenida en la configuraci\u00f3n, si corresponde. El problema se solucion\u00f3 en journalpump 2.5.0."}], "lastModified": "2024-01-02T16:25:35.387", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aiven:journalpump:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DACAD721-755F-4ED0-B6B7-1A37E9BADB86", "versionEndExcluding": "2.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}